v2.16.0

What's Changed

• fix: skip legacy_ref self-references in checklinks plugin by @AlexKantor87 in #778
• feat(k8s-reporter): add extraVolumes, extraVolumeMounts, extraEnvVars, customCA by @AlexKantor87 in #777
• Remove dead Pipedrive chat widget from docs footer by @AlexKantor87 in #783
• 5348 sonar qube pr problem by @ToreMerkely in #780
• feat: use appVersion as a default CLI version by @mbevc1 in #785
• Enable retrieving sonarqube scan results for PRs by @FayeSGW in #784
• Update helm docs by @ci-signed-commit-bot[bot] in #786

Full Changelog: v2.15.3...v2.16.0

v2.15.3

Changelog

• 9e5be3e chore(deps): bump actions/download-artifact from 7 to 8 (#765)
• ea916e8 chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ecs (#773)
• 2f12c1f chore(deps): bump github.com/mattn/go-shellwords (#775)
• 1cd7102 chore(deps): bump go.opentelemetry.io/otel/sdk from 1.41.0 to 1.43.0 (#771)
• 97344f2 chore(deps): bump golang.org/x/term in the go-dependencies group (#772)
• a34473e chore(deps): bump step-security/harden-runner (#774)
• d23437b chore(deps): bump the go-dependencies group across 1 directory with 10 updates (#769)

v2.15.2

Changelog

• efbf9c4 Remove latest_activity from repo list and get commands (#770)
• aa2066e docs: fix assert artifact help text on flag mutual exclusivity (#768)
• 05297c1 feat: add --params flag to kosli evaluate commands (#762)
• 68f7b91 fix: resolve Snyk violations, Go stdlib vulns, and broken list repos test (#767)

v2.15.1

The Docker SDK bump (v28.0.4 → v28.3.2) changed the default API version
from 1.48 to 1.51, breaking Docker operations on hosts with older daemons.

• Add WithAPIVersionNegotiation() to all 8 Docker client creation sites
• Remove DOCKER_API_VERSION pin from test.yml so CI naturally catches
  missing negotiation in future

Co-Authored-By: Claude Opus 4.6 noreply@anthropic.com

v2.15.0

Known issue: Docker operations (--artifact-type docker) in this version may fail with client version 1.51 is too new on hosts running Docker Engine < 28.3. Please use v2.15.1 or later. Fixed in #761.

• Faster Docker builds — Replaced QEMU emulation with native parallel builds on per-architecture runners. Both linux/amd64 and linux/arm64 now build natively in CI. (#759)

v2.14.0

Known issue: Docker operations (--artifact-type docker) in this version may fail with client version 1.51 is too new on hosts running Docker Engine < 28.3. Please use v2.15.1 or later. Fixed in #761.

Changelog

• 878e912 Bump codecov/codecov-action from 5 to 6 (#749)
• aadaf9c Bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 (#748)
• d8bfa54 Bump kosli-dev/setup-cli-action from 2 to 3 (#750)
• f9d4492 Fix daily CLI test (#746)
• 6b94d14 Fix: Enable HEAD resolution in git worktrees (#741)
• ed0badf Include html respone if kosli command fails and the debug flag is set server/#4839 (#744)
• 9deca1b Removed kosli expect deployment command server/#5041 (#720)
• e0e22b9 chore(deps): bump the go-dependencies group across 1 directory with 21 updates (#756)
• aa3eb76 chore(deps): gitlab.com/gitlab-org/api/client-go from 0.127.0 to 1.46.0 (#753)
• 8b7209f chore: Add commit-message prefix for Dependabot (#754)
• db8cddc chore: move away from deprecated attest action (#740)
• 05301e6 chore: reduce testing parallelism (#747)
• 35a4fc4 chore: remove Goreleaser warnings (#739)
• e1d3efc chore: update Makefile (#738)
• 1625f55 ci: add harden-runner to all GitHub Actions workflows (#755)
• 76bfc77 feat: Add CI ready Dockerfile (#718)
• b138726 fix: serialize type_schema as JSON in attestation type table output (#742)
• 58b0ea9 fix: use adaptive retry for AWS API calls to handle rate limiting (#757)

v2.13.2

Changelog

• 82877e2 Bump dcarbone/install-jq-action from 2 to 3 (#737)
• 7c163da Bump aws-actions/configure-aws-credentials from 4 to 6 (#732)
• b456d7c Bump peter-evans/repository-dispatch from 2 to 4 (#731)
• f62c192 Bump codecov/codecov-action from 4 to 5 (#730)
• 9c8619e Bump docker/setup-buildx-action from 3 to 4 (#734)
• 06100dd Bump google.golang.org/grpc from 1.79.1 to 1.79.3 (#729)
• 4c1b9bc Bump actions/checkout from 5 to 6 (#735)
• 77c6ced Bump mislav/bump-homebrew-formula-action from 3 to 4 (#736)
• 59c7da7 Bump actions/upload-artifact from 4 to 7 (#733)
• a6b888b Bump planetscale/ghcommit-action (#675)
• cfe3fde Bump actions/attest-sbom from 1 to 4 (#683)
• d3c938b Bump actions/attest-build-provenance from 1 to 4 (#678)
• 95e795b Bump docker/build-push-action from 5 to 7 (#677)
• e88f916 Bump azure/setup-helm from 1 to 4 (#680)
• 594ab36 Bump docker/login-action from 3 to 4 (#682)
• cef04d8 Bump docker/setup-qemu-action from 3 to 4 (#679)
• df4ff24 Bump actions/download-artifact from 4 to 8 (#684)
• e4a47f7 chore: Bump actions/setup-go from 5 to 6 (#681)
• 62a71ba Bump actions/create-github-app-token from 1 to 2 (#676)
• 43a4cd7 fix: use explicit input instead of github.ref for Kosli reporting conditions (#727)
• 8d777b6 chore: allow PRs from dependabot in Claude reviews (#726)
• 014cd74 Improve Claude PR review: add Go tooling, static analysis phase, and positive feedback (#723)
• e353b79 chore: use latest and centrally manage Go version (#724)
• c15a236 Make Claude review PRs (#721)
• 9966970 Fixed tests so they work on localhost (#715)
• 8abd069 Change hints in tutorials (#717)
• 9761c36 Remove invalid flags from attest sonar examples (#716)
• 1f5723e feat: add install script tests and enhance install-cli.sh for existin… (#670)

v2.13.1

Changelog

• f44c2ab Trim leading periods from artifacts (#713)

v2.13.0

• --repo-url is validated to be a well-formed URL when explicitly provided.
• --repo-provider is validated against the allowed values: github, gitlab, bitbucket, azure-devops.
• For attest pullrequest github and attest pullrequest azure, the --repository flag now also controls which repository is queried for pull requests.

v2.12.1

Changelog

• 41f59a0 write release notes to current dir to avoid goreleaser --clean deleting them (#700)
• b7c180c prevent sigpipe exits in suggest-version-ai.sh (#699)
• d22c536 do not send empty repo_info when not available in attest artifact cmd (#698)
• 84778c7 Auto semver and release notes generation for releases (#696)
• 03ac21f 4638 Improve URL formatting (#695)
• 83b59fc feat: trigger docs repo dispatch on CLI release (#694)
• 425fa22 Evaluate docs updates (#687)
• 16d7c73 Update helm docs (#693)
• df909c5 update the template used to generate helm chart docs (#692)
• 4f110f4 update chart to support multi env reporting (#690)